Splunk error for lookup files - Unable to find filename property for lookup=xyz.csv will attempt to use implicit.

[493600]

Seeing some errors in the internal logs for lookup files. Can someone help me with the reason for these errors?

1) Unable to find filename property for lookup=xyz.csv will attempt to use implicit filename.

2) No valid lookup table file found for this lookup=*

3) The lookup table '*' does not exist or is not available. - This can be due to the definition or reference of the lookup file is there but the file has been deleted.

[burwell]

Hi. Have a look at 

https://community.splunk.com/t5/Splunk-Search/Why-is-Lookup-definition-in-transforms-conf-not-return...

Sounds like there's a lookup definition in a transforms.conf and the corresponding lookup file does not exist.

You can use btool on the Splunk head to locate the setting. For example

/opt/splunk/bin/splunk btool transforms list --debug | grep file

You can see all the lookup file definitions.